ilearn-testing.oregon.gov

- State of Oregon -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:b4:a7:f8:fa:bb:7e:86:71:4f:4e:20:6f:1f:09:74 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Oregon

Organization: State of Oregon
Organization unit: DAS IT
State / Province: Oregon
Locality: Salem
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b4:a7:f8:fa:bb:7e:86:71:4f:4e:20:6f:1f:09:74
Serial Number (int): 8913388297831796658884434930704517492
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:0b:af:c2:54:1a:d9:93:03:5d:a9:1d:d7:37:52:93:5d:37:b6:19
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cf:46:c3:bd:2d:e4:6f:ad:db:5d:63:95:0b:85:6e:c4:e3:a9:9c:de
Fingerprint (sha256): 07:c8:60:07:55:fe:a8:f4:73:76:14:91:91:1a:32:68:4c:c2:57:3b:b9:4c:f2:c1:b1:81:f9:db:29:23:27:27

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate ilearn-testing.oregon.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ilearn-testing.oregon.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ilearn-testing.oregon.gov

Other certificates including the domain name oregon.gov

(limited to 100 certificates)
publicaccessqa.courts.oregon.gov
licensesonline.dcbs.oregon.gov
ojdsftp.courts.oregon.gov
omb.oregon.gov
ftp.odf.oregon.gov
www.cahcat.oregon.gov
justice.oregon.gov
otr.oregon.gov
*.jjis.oregon.gov
dhs.oregon.gov
ommpsystem.oregon.gov
perfwssecext-mci.one.oregon.gov
tag-unclaimed.oregon.gov
osp.oregon.gov
unclaimed.oregon.gov
ilearn-test.oregon.gov
aqi.oregon.gov
justice.oregon.gov
access.courts.oregon.gov
epht.oregon.gov
traditionalhealthworkerregistry.oregon.gov
5715683958587392-fe4.pantheonsite.io
*.odf.oregon.gov
mail.oed.oregon.gov
sit-orverify.oregon.gov
DASAPP.OREGON.GOV
remotesupport.dhsoha.oregon.gov
*.osbn.oregon.gov
ommpsystem.oregon.gov
sorm.oregon.gov
access3.courts.oregon.gov
contact-tracing.oha.oregon.gov
billing.dcs.oregon.gov
appellate.courts.oregon.gov
*.boli.oregon.gov
hrlb.oregon.gov
test.cahcat.oregon.gov
dsktp.doj.oregon.gov
daresource.oregon.gov
*.hcs.oregon.gov
dev.navigator.oregon.gov
hybrid.doj.oregon.gov
data.oregon.gov
vpn.boli.oregon.gov
inside.das.oregon.gov
licensesonline.dcbs.oregon.gov
facilities.nchmd.org
cebhelpdeskportal.cebupacificair.com
ilearn-testing.oregon.gov
SIT-TEST.one.oregon.gov
daresource.oregon.gov
orpin.oregon.gov
5654100301578240-fe4.pantheonsite.io
otr-test.oregon.gov
yourwater.oregon.gov
opdssentry.courts.oregon.gov
yourwater.oregon.gov
rps.licenseeservices.public.health.oregon.gov
crimstest.oregon.gov
5654100301578240-fe4.pantheonsite.io
dmv2u.oregon.gov
opdscore.courts.oregon.gov
pdpactrac.oregon.gov
epht.oregon.gov
ommpsystem.oregon.gov
mail.dhs.oregon.gov
ltcfacilityportal.oregon.gov
ilearn-testing.oregon.gov
perfwssecext-mf.one.oregon.gov
servicedesk.odva.oregon.gov
*.health.oregon.gov
minorlabels.dcbs.oregon.gov
immalert.health.oregon.gov
test.careware.oregon.gov
tls.automattic.com
crims.oregon.gov
ftp.odf.oregon.gov
ojdvideomea.courts.oregon.gov
ommpmanagement.oregon.gov
dmv2u.oregon.gov
www.energyinfo.oregon.gov
traditionalhealthworkerregistry.oregon.gov
ra.das.oregon.gov
*.dhsoha.oregon.gov
otr.oregon.gov
uatwssecext-oa.one.oregon.gov
5747976207073280-fe2.pantheonsite.io
webportalqa.courts.oregon.gov
otr.oregon.gov
psilocybin.oregon.gov
dev.navigator.oregon.gov
otr-test.oregon.gov
pt.osp.oregon.gov
buildingpermits.oregon.gov
dhs.oregon.gov
servicedesk.odva.oregon.gov
ilearn-test.oregon.gov
5747976207073280-fe2.pantheonsite.io
tickets.dtradebox.com
billing.ets.oregon.gov

Certificate

The complete raw certificate details for ilearn-testing.oregon.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJjJhha3DpAVFPqpJ9g+
wSXvtBwbFPzgvx85sMubaw4/xUC1NrGGDDz5N+0pJwZ4HePNUXRf9CRJWP1ZDnBq
D/elYGEe/MSX+t1VlI7jFBSVU066d0RN7kLfPIbT9zXOeMREmW0klGFUB4FNCyon
7Yl+G4uaF7AasIwcPRybhm0qM4jZ3vCLHdjjKWeQumHw81SYaKCWVvPk28839GLR
x6iekYb8kqIeJ39jC3q4G6uJrZt0ezPUNKkia/i1/lz+XqlcUL+5+2cbYUkGpmpo
0yyqSwiNlPp4fbKOw09W9/ZOYx1gfRB8dyoSXHbvB2O6sbMtlAE7HbBvLXUXgpD+
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8913388297831796658884434930704517492
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salem'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DAS IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ilearn-testing.oregon.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22798237071377047347043898500472460700471849984593975156365063331787036654688396098629854594000353478078684588369606802798367214863118339199111021569905605609192541346942094165496465848740231985981880940123400803077497407683012217554677831412649139561918972840865123341254881785443767505879755690704182526792928192864042302526706008229855132096373601029821109529960898198487500755227941334938968826625873256089440501265426629965370620230345378702199436682404246308418277388513008478316939866408829108327401737121214507632021442683270389637165017247184775679829039650912859263356363843777517709660237086674406750617121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9d0bafc2541ad993035da91dd73752935d37b619
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilearn-testing.oregon.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df0b72af2000004030047304502202170d8de178ac9eec836e41d8e038a4ea453ea46fb05f4a1a29dc58ce0b716a3022100ff429cca7780d9bcb95fd2ec5409e92982b6d1fbcb6be2f25f411dbd171e4e8e0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016df0b72ae40000040300473045022100e651eccff009b0dfe8b1cd7fef6b2ca32ad7c36518cd4978b77946c1bcf3371a022027c031c3809fa2fe614ce703dff010f363fa1b5a62a31defaefe429629db781e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00523b846871501aa6e6ecd3ae81b3144ef8e4b2a60518b359f32cfb7115beb4058384b07530a6e26d8fff5c8446a1d5f7df5e44771077bd31ff9625180f5a5ef2bd2f23a7d53ac85d965034d5b52781ea0ec9f773caa76d3290331999ee661432f64ab0d78fc6bd6d2245861656c044df7bf466a7b1151458677983f99d0db1d394bce527836d582dadd3adfc5b7d535df632b31aac0ccc9c080ba12ba42918cf1834311e2e10fdd40ca62b3da83f52224985b241ec5dd3900eeb2892d417c56d37593b711745fb018f5caef1e756b883961059e4b60b5cc2378ae875b2dd205f862e7d15b8460af2621ba2fb0686e891f376c025888c4abdc92efca0fd13b47b